Privacy Policy
Last updated: June 2026
Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights regarding your information.
Information We Collect
We collect information you provide directly: company name, employee names, email addresses, work schedules, attendance records, and HR data you enter into the platform. We also collect usage data such as login times and feature usage to improve the service.
How We Use Your Information
We use collected information to provide and improve the Service, send transactional emails (leave approval notifications, payslips), and provide customer support. We do not use your data for advertising or sell it to third parties.
Data Storage and Security
All data is stored on enterprise-grade infrastructure with encryption at rest and in transit. We use row-level security to ensure each company's data is completely isolated from other companies. Access to production data is strictly controlled.
Data Retention
Your data is retained as long as your account is active. Upon account deletion, data is retained for 30 days (to allow recovery) before permanent deletion. You can request immediate deletion by contacting us.
Employee Data
When you add employees to Zilonex, you are responsible for informing them that their HR data (attendance, leave, payroll) is being managed through our platform. Employees have the right to access their own data via the mobile app.
Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can view our full Cookie Policy at zilonex.com/cookies.
Location Data
The Zilonex mobile app collects GPS location data when you clock in or out. This location is used solely to verify attendance and geofence compliance. Location data is never collected in the background and is only accessed when you actively perform a clock-in or clock-out action. Location records are visible to your company administrator.
Camera & Photos
The Zilonex mobile app requests camera access to capture a selfie photo at clock-in for attendance verification. Photos are stored securely and are accessible only to your company administrator. We do not use facial recognition technology. You may decline camera access, but selfie verification will be unavailable.
Third-Party Services
We use the following third-party services: Supabase (database infrastructure), Expo (mobile app delivery), and Paddle (payment processing). Each of these services has their own privacy policy governing their use of your data.
Your Rights
You have the right to access, correct, or delete your personal data. You can export all company data from the admin dashboard. For deletion requests or data access, contact [email protected].
Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact
For privacy-related questions, contact our data protection team at [email protected].